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DETAILED ACTION 



1 . Claims 1-23 are pending. 

2. Amendment submitted 25 March 2004 has been received and entered. 



3. This application has been filed with informal drawings which are acceptable for 
examination purposes only. Formal drawings will be required when the application is 
allowed. 



4. Applicant has argued on pages 6 and 7 With regards to claims 1 and 14 that the 
Atkinson reference (US Patent No. 5,892,904) fails to teach the authenticating of the 
authenticity key to verify the source of the formatted data, but instead only teaches the 
use of the hash value to determine if the code has been modified in any way. Examiner 
agrees that Atkinson does teach the determining if modifications to a file were made 
using hash values, but disagrees with Applicant's assertion that no form of source 
authentication is taught. Atkinson teaches the use of a code certification or signing 
method for ensuring authenticity and integrity of a computer program, code, or an 
executable file received over computer network (Atkinson, column 5 lines 64-67). 
Atkinson defines "ensuring authenticity" as the assuring of the recipient of the identity of 



Drawings 



Response to Arguments 



Application/Control Number: 09/656,074 Page 3 

Art Unit: 2134 

the source of the file (Atkinson, column 6 lines 8-9). In order to ensure authenticity, 
Atkinson's disclosed system authenticates an authenticity key in the form of a publisher 
signature (Atkinson, column 6 lines 44-49). As such, Examiner asserts that the Atkinson 
reference does teach the authenticating of the authenticity key to verify the source of 
the formatted data (Atkinson, column 6 lines 8-9 and 44-49). 

5. Applicant's argument's with regards to claim 21 on Page 7 have been considered 
but are moot in view of the new grounds of rejection. 

6. Applicant has argued on Pages 7 and 8 with regards to claims 8 and 13 that the 
Atkinson reference fails to specifically disclose an "authentication server" or a server 
"being configured to insert an authenticity key into the web page requested from the 
client thereby facilitating the client to authenticate the authenticity key to verify the 
source of the web page." Examiner notes that claim 8 does not require the data to be a 
web page and as such is directed merely to generic data. With regards to applicant's 
argument, Examiner respectfully disagrees. Atkinson teaches the inserting of an 
authenticity key into the data requested from the client thereby facilitating the client to 
authenticate the authenticity key to verify the source of the data (Atkinson, column 6 
lines 1 -1 7). Thus, Atkinson teaches all of the functionality of the Applicant's 
authentication server. Further, with regards to claim 13, Atkinson teaches that the 
authenticated data can be any of a computer program, code, or an executable file. It is 
well known in the art that web pages are composed of code such as HTML. 
Nevertheless, Examiner has relied upon the Berstis reference (US Patent No. 
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6,366,912) to teach the downloaded content being web pages (see rejection of claim 13 
below). 

Claim Rejections - 35 (JSC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 1-3, 8-9, 13-16, and 20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Atkinson et al US Patent No 5,892,904 in view of Berstis et al US 
Patent No 6,735,694. Atkinson discloses a system for code certification of network 
transmissions. Bertis discloses a method and system for certifying authenticity of a 
copy of a web page. 

9. With regards to claims 1 and 14, Atkinson teaches receiving a data request from 
a client (Atkinson, column 1 lines 19-48), retrieving data based on the received data 
request (Atkinson, column 1 lines 19-48, column 5 lines 37-44), formatting the retrieved 
data wherein the formatted data includes at least one authenticity key (Atkinson, column 
5 line 64 - column 6 line 16), returning the formatted data to the client (Atkinson, 
column 6 lines 11-16), and authenticating the authenticity key to verify the source of the 
formatted data (Atkinson, column 6 lines 8-9 and 44-49). Atkinson fails to teach the 
formatting occurring in real time. Berstis teaches that upon retrieving the data, 
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formatting of the retrieved data occurs in real time (Berstis, column 5 lines 26-32, 
column 6 lines 7-13). At the time the invention was made, it would have been obvious 
to a person of ordinary skill in the art to utilize Berstis 1 method of applying formatting in 
real time with Atkinson's code certification system because it offers the advantage of 
allowing for time certification by providing a method of determining the time that a web 
page was formatted with an authenticity key (Berstis, column 1 lines 31-48). 

10. With regards to claims 2 and 15, Atkinson as modified teaches the formatted 
data being a web page (Berstis, column 5 lines 41-46). 

1 1 . With regards to claims 3 and 1 6, Atkinson as modified teaches the reading of the 
formatted data at the client (Atkinson, column 7 lines 35-38), determining if the 
formatted data includes the at least one authenticity key (Atkinson, column 7 lines 35- 
45), and verifying authenticity based on the authenticity key if it is included (Atkinson, 
column 7 lines 27-30). 

12. With regards to claims 8 and 13, Atkinson teaches a client, server, and a network 
wherein the client and server communicate (Atkinson, Figure 2A), an authentication 
server that is in communication with the server (Atkinson, column 5 line 64 - column 6 
line 16), and an authentication server being configured to insert an authenticity key into 
the web page requested from the client thereby facilitating the client to authenticate the 
authenticity key to verify the source of the web page (Atkinson, column 6 lines 1-1 7, 
Berstis, column 5 lines 26-32, column 6 lines 7-13). At the time the invention was 
made, it would have been obvious to a person of ordinary skill in the art to utilize 
Berstis' method of automatically inserting an authenticity key into requested data with 
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Atkinson's code certification system because it offers the advantage of allowing for time 
certification by providing a method of determining the time that a web page was 
formatted with an authenticity key (Berstis, column 1 lines 31-48). 

13. With regards to claim 9, Atkinson as modified teaches a client including a 
browser (Atkinson, column 5 lines 47-44) wherein pages are displayed to a user on a 
display device on the client (Atkinson, column 5 lines 45-63). 

14. With regards to claim 20, Atkinson teaches the receiving and returning steps 
being implemented via at least one of the Internet, interactive television system, 
broadband system, regular band system, wireless system, radio transmission, landline 
phone system, and cellular phone system (Atkinson, column 5 lines 25-35). 

15. Claims 4, 6, 10-11,17, and 23 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Atkinson et al US Patent No 5,892,904 in view of Berstis et al US 
Patent No. 6,735,694, as applied to claims 3, 8, 10 and 16 above, and in further view of 
Wallent et al US Patent No 6,366,912. 

16. With regards to claims 4 and 17, Atkinson as modified teaches the verification of 
an authenticity stamp (Atkinson, column 7 lines 23-30) but fails to teach the displaying 
of the data based on the verification of the authenticity key. Wallent discloses a 
browser that displays data based on the verification of a security rules (Wallent, column 
1 1 line 18 - column 12 line 3). At the time the invention was made, it would have been 
obvious to a person of ordinary skill in the art to utilize Wallent's method of displaying 
data after verifying the security procedures because it offers the advantage of allowing 
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the browsing of the World Wide Web while reducing the risks of malicious code being 
downloaded from a web page (Wallent, column 1 lines 24-37 and column 2 lines 10-19). 

17. With regards to claims 6 and 23, Atkinson as modified teaches an authenticity 
key being applied to each file (Atkinson, column 6 lines 11-16) but fails to teach the file 
being a graphic file. Wallent teaches the downloading to a user of a web page as 
described above and the web page including a graphic file (Wallent, column 1 lines 31- 
35). 

1 8. With regards to claims 10-11, Atkinson as modified teaches the adding of an 
authentication key to an object and its subsequent verification but fails to specifically 
teach the object being a page and thus a server sending a page to the client. Wallent 
teaches a server sending a page to a client (Wallent, Figure 9). At the time the 
invention was made, it would have been obvious to a person of ordinary skill in the art to 
utilize Wallent's method of applying security to web pages sent from a server because it 
offers the advantage of allowing the browsing of the World Wide Web while reducing the 
risks of malicious code being downloaded from a web page (Wallent, column 1 lines 24- 
37 and column 2 lines 10-19). 

19. Claim 21 is rejected under 35 U.S.C. 103(a) as being unpatentable over Atkinson 
et al US Patent No 5,892,904 in view of Berstis et al US Patent No. 6,735,694, as 
applied to claim 1 above, and in further view of Asad et al US Patent No 6,539,093. 
Asad discloses a key ring organizer for an electronic business using public key 
infrastructure. 
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20. With regards to claim 21 , Atkinson as modified teaches the step of authenticating 
the authenticity key to verify the source of the formatted data (Atkinson, column 6 lines 
8-9 and 44-49), but fails to teach the use of a browser plug-in interfacing with a MIME 
type. Asad teaches the use of a browser plug-in interfacing with a MIME type (Asad, 
column 7 lines 22-35). At the time the invention was made, it would have been obvious 
to a person of ordinary skill in the art to utilize Asad's method of using plug-ins 
interfacing with a MIME type with Atkinson as modified because it offers the advantage 
of allowing the certification of third party keys by way of a browser initiating a request 
message to the plug-in (Asad, column 3 lines 20-42). 

21 . Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over Atkinson 
et ai US Patent No 5,892,904 in view of Berstis et al US Patent No. 6,735,694, as 
applied to claim 8 above, and in further view of Walker et al US Patent No 6,286,001. 
Walker discloses a system and method for authorizing access to data on content 
servers in a distributed network. 

22. With regards to claim 22, Atkinson as modified fails to teach the authentication 
server verifying a user ID and password. Walker teaches the authentication server 
verifying a user ID and password (Walker, column 1 1 lines 45-53). At the time the 
invention was made, it would have been obvious to a person of ordinary skill in the art to 
utilize Walker's user ID/password method with Atkinson as modified because it offers 
the advantage of allowing greater control over the authorization to view designated web 
sites (Walker, column 2 lines 52-64). 
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23. Claims 5, 7, 12, and 18-19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Atkinson et al US Patent No 5,892,904, Berstis US Patent No. 
6,725,694 and Wallent et al US Patent No 6,366,91 2 as applied to claims 4, 1 1 , and 1 7 
above, and further in view of Houser et al US Patent No 5,606,609. 

24. With regards to claims 5 and 18, Atkinson as modified above fails to teach the 
displaying of an authenticity stamp. Houser teaches an authenticity stamp being 
displayed for data that has been successfully verified (Houser, column 8 lines 12-15 and 
column 7 lines 52-59). At the time the invention was made, it would have been obvious 
to a person of ordinary skill in the art to utilize Houser's method of displaying an 
authenticity stamp because it offers the advantage of providing a user friendly deterrent 
to forgery and alterations to documents (Houser, column 3 lines 15-46). 

25. With regards to claim 7 and 19, Atkinson as modified above fails to teach the 
displaying of a non-authenticity stamp. Houser teaches an non-authenticity stamp 
being displayed for data that has been unsuccessfully verified (Houser, column 16 lines 
44-48). 

26. With regards to claim 12, Atkinson as modified above fails to teach the display 
including an indication of the authenticity based on the authenticity key. Houser 
teaches an authenticity stamp being displayed when an authenticity stamp is verified 
(Houser, column 8 lines 12-15 and column 7 lines 52-59). At the time the invention was 
made, it would have been obvious to a person of ordinary skill in the art to utilize 
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Houser's method of displaying an authenticity stamp because it offers the advantage of 
providing a user friendly deterrent to forgery and alterations to documents (Houser, 
column 3 lines 15-46). 

Conclusion 

27. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 

§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

28. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Andrew L Nalven whose telephone number is 703 305 
8407. The examiner can normally be reached on Monday - Thursday 8-6, Alternate 
Fridays. 



Application/Control Number: 09/656,074 



Page 1 1 



Art Unit: 2134 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory Morse can be reached on 703 308 4789. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 





Gregory morse 

SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 



